bd26ed85f5266c532771c712e15dc17f

Sharing

Copy URL Twitter E-mail

General

Target

bd26ed85f5266c532771c712e15dc17f
Size

50KB
MD5

bd26ed85f5266c532771c712e15dc17f
SHA1

647f908a5304e614fc98f90f9cd75cac2c2d3460
SHA256

4218fcf82a0b041aba7aca8a8d68304b91948b0cd6cb2404dec2bd4be777946e
SHA512

599ebb0c9162a8a7847b8669f8664cc8c1e104a5b15076613403a47acbb21f634a17c0d414c883426e9a35a96abfe2c6bde53a7e441d9458287d64b424a91905
SSDEEP

1536:6VLcBqgBTd/N79H4QKEP9uFcdxkc/oMP8:6VNg91NZk0qHSos8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd26ed85f5266c532771c712e15dc17f

Files

bd26ed85f5266c532771c712e15dc17f
.dll windows:5 windows x86 arch:x86

3d8a2e2732073d34a83ae0df7802aa9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetOEMCP
CreateMutexA
GetFileAttributesA
GetLocaleInfoA
VirtualAlloc
QueryPerformanceCounter
GetModuleHandleA
GetCPInfo
FileTimeToLocalFileTime
GetTickCount
GetFileType
ReleaseMutex
InterlockedDecrement

gdi32

GetStockObject
SelectObject
ExtTextOutW
SelectClipRgn

comctl32

PropertySheetA

user32

SystemParametersInfoA
SetCaretPos
ClientToScreen
SetWindowsHookExA
EnumThreadWindows
GetWindowRect
AppendMenuA
IsIconic
CallNextHookEx
MapVirtualKeyExA
DestroyCaret
LockWindowUpdate

shell32

ShellExecuteA
SHGetPathFromIDListA

ntdll

ZwQueryIntervalProfile
ZwQueryIoCompletion
NtCreateTimer
ZwQuerySystemInformation
ZwClose
ZwQueryOpenSubKeysEx

clbcatq

DeleteAllActivatorsForClsid
SetSetupOpen
GetSimpleTableDispenser
GetCatalogObject
ActivatorUpdateForIsRouterChanges
OpenComponentLibraryOnStreamEx

Exports

Exports

GetAdapterOrderMap
GetIpErrorString
CreateProcessNotify
GetIpAddrTable
DllClientEntry
InternalDeleteIpNetEntry
FlushIpNetTable
GetInterfaceInfo
EnableRouter
GetBestRoute
GetIcmpStatisticsEx
SetIpNetEntry
Icmp6ParseReplies
GetTcpTable
IpRenewAddress
GetUniDirectionalAdapterInfo
NotifyRouteChange
AddIPAddress
InternalSetTcpEntry
InternalGetUdpTable
DeleteProxyArpEntry
IpReleaseAddress
IcmpParseReplies
GetExtendedUdpTable
GetUdpStatistics
InternalGetIpNetTable
DisableMediaSense
InternalDeleteIpForwardEntry
CreateIpNetEntry
Icmp6SendEcho2
GetIfTable
SetIfEntry
IcmpCreateFile
NotifyAddrChange
SetIpStatistics
GetAdaptersInfo
DeleteIpNetEntry
CancelIPChangeNotify
GetExtendedTcpTable
NhGetInterfaceNameFromGuid
IcmpCloseHandle
NTTimeToNTPTime
GetUdpStatisticsEx
GetBestInterface
NhGetInterfaceNameFromDeviceGuid
InternalGetIpAddrTable
NhGetGuidFromInterfaceName
InternalSetIfEntry
NTPTimeToNTFileTime
GetUdpTable
InternalGetTcpTable
GetIcmpStatistics
SetIpForwardEntry
InternalGetIfTable
InternalSetIpForwardEntry
do_echo_req
DeleteIPAddress
GetIpNetTable
GetBestInterfaceEx
GetPerAdapterInfo
GetIpForwardTable
GetAdapterIndex
GetTcpStatistics
GetOwnerModuleFromTcpEntry
SetAdapterIpAddress
GetIfEntry
GetFriendlyIfIndex
do_echo_rep
CreateIpForwardEntry
InternalCreateIpForwardEntry
GetOwnerModuleFromUdpEntry
IcmpSendEcho
IcmpSendEcho2
UnenableRouter
GetOwnerModuleFromTcp6Entry
AllocateAndGetIpAddrTableFromStack
GetIpStatisticsEx
GetNetworkParams
InternalSetIpStats
GetRTTAndHopCount
Icmp6CreateFile
GetNumberOfInterfaces
RestoreMediaSense
CreateProxyArpEntry
GetIpStatistics
SetIpTTL
DeleteIpForwardEntry
GetAdaptersAddresses
SetTcpEntry
GetOwnerModuleFromUdp6Entry
register_icmp

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d8a2e2732073d34a83ae0df7802aa9b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

shell32

ntdll

clbcatq

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 9KB - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB